I was experimenting with SDN today to see if it would improve managing the various networks using VLANs that are present on my network. I have 7 nodes and each of the nodes have 5 x 1GB RJ45 interfaces. Two of those interfaces are bonded together and are configured for use by Proxmox VE and Ceph. The remaining three interfaces are then bonded together and are for use by the various VMs running on a node. The problem that I encountered is that I have those interfaces setup on the switch so that the native or untagged VLAN is set to 81 and the other VLANs are all accessed using their associated tag.
When creating a VLAN zone and then the subsequent VNet it requires a tag to be entered thus not allowing me to access the native or untagged VLAN which happens to be the VLAN i used for when I am doing any sort of testing or development work. While I could reconfigure the switches so that the native VLAN is say 254 which is my isolated VLAN for ports that are left open so that simply connecting a device does not get you access to anything, it would take a bunch of work.
Would it be best practice to have the native VLAN on all switch be the isolated VLAN and then only use tags for everything else or should the SDN allow you to create a VNet without having to specify a tag?
When creating a VLAN zone and then the subsequent VNet it requires a tag to be entered thus not allowing me to access the native or untagged VLAN which happens to be the VLAN i used for when I am doing any sort of testing or development work. While I could reconfigure the switches so that the native VLAN is say 254 which is my isolated VLAN for ports that are left open so that simply connecting a device does not get you access to anything, it would take a bunch of work.
Would it be best practice to have the native VLAN on all switch be the isolated VLAN and then only use tags for everything else or should the SDN allow you to create a VNet without having to specify a tag?